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We speculate what quantum information protocols can 
be implemented between two accelerating observers using the 
vacuum. Whether it is in principle possible or not to im- 
plement a protocol depends on whether the aim is to end 
up with classical information or quantum information. Thus, 
unconditionally secure coin flipping seems possible but not 
teleportation. 



I. INTRODUCTION 

Entanglement is in the eyes of the beholder. Unitary 
transformations that affect the definition of one's systems 
change, in general, the amount of entanglement in a given 
state. For instance, the Lorentz transformation of the 
spin degrees of freedom of a particle depends on its mo- 
mentum. Thus the entanglement between the spin and 
momentum of a particle is not a Lorentz-invariant con- 
cept [1] . One observer may see a product state, while an- 
other believes there is entanglement. Similar discussions 
of the Lorentz invariance or the lack thereof of entangle- 
ment can be found in Refs. [2,3]. For another example, 
take a state containing a single circularly polarized pho- 
ton. When written in terms of linear polarization, this 
state becomes (|0)|1) -I- i|l)|0))/V2, which seems to be 
maximally entangled (for similar but more complicated 
and less boring cases see [4]). In both types of exam- 
ples, however, the apparent entanglement is always local. 
As such, it cannot be used for any nontrivial quantum 
communication protocols. 

Here we discuss a well-known phenomenon that does 
produce nonlocal entanglement, the Unruh effect [5-7]. 
It involves just the vacuum, and the unitary transfor- 
mations arise when one describes accelerating observers. 
We investigate which, if any, quantum communication 
protocols could be implemented using this resource. We 
consider protocols involving two accelerated observers, in 
contrast to Ref. [8], which considers quantum teleporta- 
tion involving one inertial and one accelerating observer. 



vacuum should be transformed into a pure state, not a 
mixed state. Indeed, the state of the modes inside Alice's 
event horizon only appears mixed because it is entangled 
with modes that lie outside that horizon. More precisely, 
each mode is entangled with one "mirror" mode, a mode 
propagating along a trajectory that is the mirror image 
relative to the appropriate event horizon. For each pair 
of mirror modes of frequency lu' (as measured by the 
accelerating observers), the entangled state is in fact a 
two-mode squeezed state of the form 



(1) 



where /i — exp{—nLu'c/a). Mirror modes are the appro- 
priate modes for an observer Bob accelerating uniformly 
at the same acceleration a but in the opposite direction 
along a trajectory that is, again, a mirror image relative 
to the same event horizon. That the entanglement and 
nonlocal correlations present in the state (1) may be real 
in the sense that they can be measured and perhaps even 
exploited has been discussed before [2,9-11,8]. 

The Unruh effect can be understood by considering 
the transformation between creation and annihilation 
operators from Alice's frame of reference to that of a 
Minkowski observer, Mork. The transformation is of the 
form 



a' = (a — /ia^)/-\/l — /i^ 
a' — {a — /ifl^ )/ yl — M^. 



(2) 



where we absorb irrelevant phase factors in the definitions 
of the mode operators. Here we use notational conven- 
tions that primed operators and variables correspond to 
accelerating observers, and that operators with a tilde 
correspond to mirror modes. The modes here are as- 
sumed to be localized wave packet modes, as constructed 
in [6]. The fact that a creation operator appears in the 
transformation of an annihilation operator, distinguishes 
(2) from standard unitary transformations of modes [4]. 



II. THE UNRUH EFFECT 

Suppose Alice is accelerating at a uniform acceler- 
ation a. As is well known [5], she will perceive the 
Minkowski vacuum state (of, say, the electromagnetic 
field) as a mixed thermal state with equivalent tempera- 
ture ksT = ?ia/(27rc). Since the transformation from an 
inertial to an accelerating frame is unitary, however, the 



HI. QUANTUM COMMUNICATION 
PROTOCOLS 

The questions we consider now are (i) what useful 
quantum information tasks might Alice and Bob perform 
with the entangled state (1)? (ii) how does a Minkowski 
observer, Mork, describe their actions and make sense of 
it? After all, according to Mork, Alice and Bob share 
nothing but the vacuum and are causally disconnected. 
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and so it may seem they should not be able to perform 
any interesting protocols. We will consider several quan- 
tum information processing protocols that are known to 
rely on entanglement and discuss to what extent they can 
be implemented by Alice and Bob. 

Concerning question (i)^ there is an important distinc- 
tion between two types of quantum communication pro- 
tocols: those that terminate with at least one party hold- 
ing a quantum state, and those that terminate with all 
parties holding purely classical information. In the for- 
mer case the desired quantum states typically exist only 
in the eyes of Alice and Bob, and thus, in the scenarios 
considered here, only as long as they keep accelerating. 
Clearly this does not allow Alice and Bob to ever com- 
municate, not even classically. This does restrict at least 
the usefulness of the protocol and sometimes it prevents 
the protocol from being executed at all. In the latter 
type of protocols, however, Alice and Bob are both free 
to decelerate after having performed the required quan- 
tum operations (since wc presume, hopefully correctly, 
that classical information, unlike quantum information, 
is not affected by deceleration), and thus may communi- 
cate afterwards. This then may lead, apart from practi- 
cal considerations, to useful implementations of certain 
quantum protocols. Our primary goal here is to discuss 
in detail an example of each type, to demonstrate both 
the potential and the limitations of vacuum entanglement 
for quantum communication protocols. We also briefly 
mention various other protocols. 

Concerning question (ii) we note that Alice's and 
Bob's local operations appear nonlocal to Mork, and vice 
versa. The parameter /x, which measures the strength of 
the Unruh effect and the amount of nonlocality, writ- 
ten in Mork's coordinates is equal to (using Rcf. [6]) 
fi — exp(— 7r^I?/A), where D is the distance between the 
mirror trajectories and A the wavelength. (In contrast, 
recall that for the accelerating observers /x does not de- 
pend on the distnace between the relevant modes.) In 
order to have any appreciable effect, at the moment Al- 
ice and Bob wish to use their entanglement, they must 
be within a distance D ~ A/tt^ of each other, that is, 
within the coherence length of the vacuum fluctuations 
[10]. This is how Mork can make some physical sense out 
of the nonlocal character of Alice's and Bob's actions and 
of the fact that, counter to Mork's expectations, some of 
their protocols seem to work. 

A. Teleportation 

Let us start with one of the more famous proto- 
cols, quantum teleportation [12]. Indeed, a two-mode 
squeezed state of the same form (1) can be used for ex- 
actly that purpose [13,14]. We also note that teleporta- 
tion with the resource (1) is briefly discussed in [2]. A 
later paper by the same authors considers teleportation 
involving one inertial and one accelerating observer [8]. 



Teleportation is a clear example where the aim is to 
end up with a quantum state, and where classical com- 
munication is necessary. Thus the prospects for Alice and 
Bob are bleak. Indeed, standard teleportation is not pos- 
sible, but a weaker variant of it is. This weaker variant is 
in essence an example of quantum steering [15] — the pro- 
cess whereby a local choice of measurements by Alice can 
steer Bob's half of an entangled state to any ensemble of 
his local density operator. 

We first describe the experiment from Alice's frame of 
reference. Alice uses two modes, one mode T contains the 
state she wishes to tclcport, the other, E contains half 
of the entangled state. Similarly, Bob's corresponding 
mirror modes are denoted by T and E. Let us assume 
Alice wishes to teleport a coherent state. In order to 
prepare that state, Alice first cools down the mode T, 
i.e., removes all (Rindler) photons from it. Subsequently 
she applies a displacement operation. (Cooling is not a 
necessary part of the protocol. Alice could just teleport 
the action of the displacement operation on the thermal 
state as it is. In that case the description becomes more 
tedious and less clear. ) For convenience, we assume 
that Bob, too, cools down his mode T although this is 
not necessary at all for the teleportation protocol. The 
most convenient way to describe teleportation then is by 
using the Wigner function [14], as at all times the states 
of the modes involved will be Gaussian. Moreover, it is 
customary to use Hermitian quadrature variables X and 
P instead of a and a\ defined through a = X + iP, and 
corresponding eigenvalues x and p. For the two-mode 
squeezed state one has (leaving out irrelevant normaliza- 
tion factors) 

W^; ^ ~ exp ( - \^[{x'e - x'^r + (p'e +p'Er] 

-\^[{^'E+i'Er+{p'E-p'Er])- (3) 

Similarly, a coherent state \ao)T' is described by 

~ exp(-2(x^ - xof - 2('pT-pof), (4) 

where — Xq + ipo . 

Alice then performs a joint measurement on her modes 
r and E. She measures the commuting observables 
X'^ + X!p and P^ — P^, for example, by homodyne detec- 
tion with a strong local oscillator field. After this mea- 
surement, which we assume to have outcomes X and P 
respectively, Alice then ascribes the following quantum 
state to mode E on Bob's side 

W'^ ~ exp ( - ^— ^[(x'^ + X0- Xf + ip'^ +P0 - Pf] 

- [(4 -xo-Xf + ip'^-po-Pf) (5) 

When fj, approaches unity, the state on Bob's side re- 
duces to a coherent state, but displaced by an amount 
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(5 = X + iP. In the standard tclcportation protocol Al- 
ice would send Bob the classical outcomes X and P and 
Bob would displace his state by an amount — /3 to re- 
trieve the state Alice teleported. Clearly, this step is not 
possible. According to Bob, his state will always remain 
a mixed thermal state, but based on Alice's information 
she assigns Bob's system the state (5). 

It is easy, albeit somewhat tedious, to write down the 
Wigncr functions Mork observes, by using the inverse 
transformations of (2). Clearly, they will remain Gaus- 
sians for Mork as well. Here, however, we just focus on 
the local vs. nonlocal aspects of Alice's actions. Alice 
and Bob start out with the vacuum. Then both Al- 
ice and Bob cool down their modes T and T. Mork, 
though, does not view these cooling operations as local. 
In fact, he will claim that Alice and Bob create a two- 
mode squeezed state between those two modes, of the 
same form (1) but with fj, — /x, as follows directly from 
the inverse transformation of (2) . Alice subsequently ap- 
plies the displacement operator to her mode: according 
to Mork this is again a nonlocal transformation, displac- 
ing not only mode T but Bob's mode T. 

Then Alice performs her joint measurement, which ac- 
cording to Mork is a nonlocal measurement of the vari- 
ables 

and 

Pe - Pt - fJ-jPE - Pf) 

with the same outcomes X and P, respectively. This will 

create an entangled state of all 4 modes involved, accord- 
ing to Mork. This is in contrast to Alice's description, 
who believes her 2 modes have been disentangled from 
Bob's modes. According to Mork, no teleportation takes 
place. 

B. Secure coin flipping 

Two-party cryptographic protocols involve two antago- 
nistic parties, Alice and Bob, who wish to complete some 
information processing task. In classical information the- 
ory it has been proven that no two-party protocols exist 
which have "information theoretic" security [16-18]. In 
quantum cryptography protocols do exist with various 
degrees of quantum information theoretic security, and 
thus examining these protocols provides a readily quan- 
tifiable way of distinguishing classical from quantum in- 
formation theory. 

It is standard to assume in two-party quantum cryp- 
tography that the initial state of systems held by Alice 
and Bob is separable, i.e. of the form |0)^ |0)^. However 
it is interesting to note that if Alice and Bob share prior 



trusted entangled states then some (otherwise impossi- 
ble) arbitrarily secure quantum cryptographic protocols 
become possible, while others remain impossible. For 
example, if they share a maximally entangled state of 
two qubits, then an arbitrarily secure coin flip is trivially 
possible - the coin flip outcome is simply the result each 
party obtains by measuring their half of the entangled 
pair in an orthogonal basis. By contrast, as can be de- 
duced from [18], the sharing of a prior trusted entangled 
state does not give Alice and Bob the ability to perform 
an arbitrarily secure bit commitment. Thus there is an 
intricate hierarchy of the security obtainable in these pro- 
tocols with respect to any initially trusted entanglement 
resources. 

What we are proposing here is that the (Minkowski) 
vacuum state |0)^ |0)g can also be considered a "prior 
trusted" state. Since, as discussed above, this is in fact 
also a (Rindler) entangled state, we surmise that it can, 
in fact, be used to implement a secure coin flip. 

We first define the task of coin fiipping more precisely: 

(Strong) Coin Flipping: Alice and Bob im- 
plement a protocol, at the end of which each 
infers the outcome of the protocol to be one 
of '0', '1' or 'fail'. If both are honest, then 
they agree on the outcome and find it to be 

or 1 with equal probability. If party X 
cheats, while his or her opponent is honest, 
then X cannot make the probability of the 
opponent finding the outcome to be greater 
than 1/2 + and cannot make the prob- 
ability of the opponent finding the outcome 

1 to be greater than 1/2 + e^. The parame- 
ters e^,e\,e%,e^, which specify the security 
of the protocol, must each be strictly less than 
1/2. 

The protocol is considered arbitrarily secure 
if, and only if, the parameters c'a'^a^^^^^b 
can simultaneously be made to approach zero. 

Intuitively speaking, such a coin flipping protocol is 
meant to result in a random bit outcome, and neither 
Alice nor Bob should be able to bias the bit value towards 
either or 1. It has been shown by Kitaev, that within 
the standard quantum communication paradigm wherein 
Alice and Bob start with a state of the form |0)^ |0)g and 
build up an entangled state via rounds of communication, 
all coin flipping protocols satisfy {1/2 + e\){l/2 + e''g) > 
1/2, b = 0,1. Thus, arbitrarily secure quantum coin 
flipping within this paradigm is impossible. The best 
known protocols [17,18] do not even saturate Kitaev's 
lower bound. 

We should emphasize that in two-party cryptographic 
protocols there is a basic presumption that each party 
feels secure about their own laboratory. In fact, it is de- 
sirable that this need be the only thing they feel secure 
about - i.e. we presume that the parties should not have 
to feel secure about things outside their own lab. We note 
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here explicitly that, for instance, changing boundary con- 
ditions on the field in one of the two Rindler wedges does 
not modify the thermal spectrum seen by an observer in 
the other wedge, as was pointed out by Pringle [7]. 
The protocol we consider here is as follows: 

Unruh based coin flipping: 

From Alice's point of view, an instance of the 
protocol is specified by two points in space- 
time chosen to be located inside Alice's lab. 
At time i = Alice, who is uniformly acceler- 
ating with acceleration a, is instantaneously 
at rest (see Figure 1) in Mork's reference 
frame. At that moment, Alice turns on a de- 
tector D2 (see Fig. 1), if she records a photon 
then the outcome of the coin flip is 1, other- 
wise it is 0. In order for her to trust this result 
she must have checked before t = Q whether 
the corresponding field mode was in fact in 
the Minkowski vacuum. She does that by us- 
ing an inertial detector Di, which must be 
inside her lab for a sufficient amount of time 
that she can verify the detector and the state 
of the relevant localized wavepacket. 

Bob uses a similar procedure by traveling on 
the "mirror trajectory" (accelearating in the 
opposite direction) such that he is detecting 
the other half of the Unruh entangled state. 




FIG. 1. Upside-down spacetime diagram indicating coin 
flipping using the Unruh effect. 

The above protocol is slightly unconventional. How- 
ever, intuitively speaking, it is simply relying on the fact 
that what Minkowski observers consider to be a separable 
vacuum state |0)^ |0)^, transforms to the entangled state 
(1) for accelerating observers. The purpose of the first 
detector measurement at time t = is to ensure that 
the mode k (see Fig. 1) which will determine the coin 



flip outcome is in the correct Minkowski initial state. (A 
cheating Bob could have his friend try and populate this 
mode prior to it entering Alice's laboratory, for example). 

Several other technical issues arise. Clearly a must be 
chosen to ensure that the probability of detector D2 reg- 
istering photons is the same as that of registering one 
or more photons - i.e. such that /i^ — 1/2. We also wish 
this detector to be sensitive to a localized, travelling Un- 
ruh wavepacket. A formal quantization of Rindler space 
in terms of such modes can be found in [6], and from 
these results one can infer the appropriate detector mode 
function responses required. 

Another issue is that localized detectors necessarily 
will register "dark counts" , with some (small) probability. 
This would affect measurements done at small accelera- 
tions, but not at the impractically large accelerations we 
are considering. 

We conclude with a few observations. Firstly we must 
assume that Alice's laboratory is large enough to contain 
both detectors at the appropriate spacetime points. (Al- 
ice does not, however, require other guarantees about the 
whereabouts of Bob). Also, the further Alice and Bob are 
apart, the larger the acceleration has to be. Thus there 
are nontrivial tradeoffs between the various physical re- 
quirements of such a protocol. 

C. Other protocols 

Here we briefly consider other protocols of both types 
mentioned previously: 

1. Dense coding 

Dense coding [19] is a protocol that allows one to send 
2 classical bits of information by sending one qubit, pro- 
vided one prepared an entangled state in advance. Here, 
however, at least the receiver would have to keep ac- 
celerating so as to keep the entangled state, but in that 
case the receiver cannot receive anything from the sender. 
Thus, it seems not possible to use the Unruh effect for 
dense coding. 

2. Quantum Key Distribution 

In Quantum Key Distribution Alice and Bob wish to 
share secret classical bits. The way they can agree on 
classical bits is very much as in the coin flipping protocol. 
This time, though, they do trust each other, but not a 
possible eavesdropper Eve. Just as in the Ekert protocol 
[20], they can check for Eve's existence by performing 
the appropriate Bell measurements. Indeed, it is well- 
known Bell inequalities are violated (to the maximum 
extent, in fact) in the vacuum of any quantum fleld theory 
[9] . They do have to communicate classically, in order to 
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check their measurement results, but they can do that 
afterwards. 



3. Bit commitment 

As mentioned above, bit commitment [21] would re- 
quire even more than a trusted entangled state. We sus- 
pect this protocol is not possible with the Unruh effect, 
even though only classical information is needed in the 
end. 
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IV. SUMMARY 



Certain two-party quantum communication protocols 
that require entanglement can be performed with just the 
vacuum. Typically, protocols whose goal it is to produce 
a quantum state will not work in any useful way, but 
two-party protocols aimed at establishing purely classi- 
cal information may work. In particular, unconditionally 
secure coin flipping is possible, so is unconditionally se- 
cure key distribution. On the other hand, teleportation 
between two accelerating observers is only possible in a 
weaker version. 
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